Account Administering for Non Tech Staff

I would like to allow certain users to be able to unlock NT Domain accounts without having them use the User Manager for Domains. I need this to be secure, and fully audited so that I can trace who does what where and when. Is there anything available on the market or would there be any mileage in upgrading the Domain to W2K and would this present me with any further options.